Synology Photo Station Directory Traversal Vulnerability (CNVD-2017-27714)

Synology Photo Station is an online photo album and blog owned and managed by DSM users. A directory traversal vulnerability exists in PixlrEditorHandler.php in Synology Photo Station, which can be exploited by remote attackers to write arbitrary files via path parameters...